[Hiring] IT Audit Manager @Root Insurance

Role Description

The IT Audit Manager, Internal Audit and Internal Controls exists to lead the ongoing maintenance, evaluation, and testing of the organization’s IT general controls (ITGCs), application controls, and IT security controls for the SOX, Model Audit Rule (MAR), and Internal Audit programs. This role is expected to play a critical part in the continuing evolution of the internal technology control framework while managing audit projects across cloud infrastructure, engineering, data platforms, and core business systems as part of the Internal Audit function.

Success is achieved by:

• Providing strong project management over technology audits.
• Reviewing technical workpapers for external and audit report readiness.
• Leveraging AI to perform data analytics and visualization.
• Educating cross-functional business and engineering partners on maintaining a robust, scalable control environment.

The ideal candidate combines hands-on IT audit expertise, strong supervisory skills, and a deep understanding of information security, modern technology architecture, and risk management.

Qualifications

• 5+ years of relevant experience in IT Audit, IT Risk and Compliance, Information Security, or Internal Audit (in-house or Big Four / public accounting equivalent).
• 2+ years of supervisory or team leadership experience.
• 2+ years of experience working in an Insurance, Technology, or InsurTech environment preferred.
• CISA, CIA and/or CPA are preferred.
• Solid knowledge of IT General Controls (ITGCs), Information Security, Change Management, System Development Life Cycles (SDLC), Logical Access, and Computer Operations.
• Familiarity with industry standards and regulatory frameworks, such as COSO, SOC 1 / SOC 2, SOX and/or NAIC Model Audit Rule.
• Experience auditing modern cloud architectures (e.g., AWS), SaaS ecosystems, and automated data pipelines.
• Analytical & Problem-Solving Capabilities: Highly analytical, with demonstrated experience leveraging data-driven insights and audit analytics to evaluate systems and prioritize risk.
• Project Management & Communication: Proven track record of managing multiple project timelines simultaneously, with exceptional written and verbal communication skills and the ability to influence technical and non-technical stakeholders without direct authority.

Requirements

• Lead IT Audit & Compliance Project Management: Drive project management efforts for the implementation, testing, and continuous monitoring of Root’s IT General Controls (ITGCs), automated application controls, SOC 1 reviews, and IT-dependent reporting to support SOX and Model Audit Rule (MAR) compliance.
• Supervise & Guide Audit Execution: Lead and mentor IT auditors and cross-functional team members through complex technology processes, system implementations, and automated & manual controls.
• Review Workpapers & External Audit Liaison: Review IT audit workpapers to ensure alignment with professional standards, audit readiness, and seamless coordination with external auditors and regulatory examiners.
• Critical Technology Projects & System Launches: Partner proactively with engineering, product, and IT operations to ensure risk and control perspectives are assessed, designed, and implemented during critical business and technology initiatives.
• Stakeholder Collaboration & Education: Work collaboratively with the Head of Internal Audit and Internal Controls and technology process owners (including engineering, InfoSec, and IT) to effectively communicate the value of proactive risk management and strong internal controls.
• Issue Evaluation & Remediation: Collaborate with control owners to identify root causes, vet IT findings, evaluate year-end issue severity, and verify that effective, sustainable technical remediation is implemented.
• Reporting & Data-Driven Insights: Develop clear, concise audit reports and executive updates utilizing data analytics and visualization concepts to communicate audit results and IT risk exposures to leadership.
• Policy & Control Framework Evolution: Partner with the team to maintain and update IT internal audit standards, methodologies, testing procedures, risk and control matrices (RCMs), and process flowcharts.
• GRC System Utilization: Utilize the organization’s governance, risk, and compliance (GRC) tool (Optro) to facilitate end-to-end preparation, review, documentation, and tracking of IT audit workpapers and remediations.

Benefits

• Salary Range: $134,100 - $167,600 (Eligible for competitive bonus and equity offering).
• Work from any location across the US.